FutureGateway the DevOps way

I’ve hit a problem with the FutureGateway stack deployment code. The goal is to write the deployment in such a way as to make it deployable on a cloud-native platform, following 12-factor. I’m using AnsibleContainer to do this. The container.yml looks like this : version: "2" settings: # We choose Jessie as the Conductor base since that's what the mysqldb is using. conductor_base: debian:jessie services: apiserver: from: centos:7 roles: - AAROC.fgapi ports: - 8888:8888 command: ['/bin/true'] privileged: True db: from: mysql roles: - AAROC.fg-db ports: - 3306:3306 environment: - MYSQL_ROOT_PASSWORD= - MYSQL_USER= - MYSQL_USER_PASSWORD= command: ['mysqld'] entrypoint: ['/entrypoint.sh'] volumes: -...…

read more...

VOMS server and Ansible role update

The Virtual Organisation Membership Service is a service providing authorisation to use grid and cloud services. The VOMS releases signed proxies of users’ personal certificates which can be used by the middleware stacks to authenticate to the various middelware services. An error was detected on the VOMS server hosting the sagrid, sagrid.ac.za and stell.bio VOs. Connections to the voms-admin and voms service were failing, and the web interface was also down. Upon investigation, it was found that there was a conflict between the old version if java installed (Java-1.6.0) and the Jetty environment needed by the VOMS applications. We keep...…

read more...

DevOps Bootcamp : CSIR

TL;DR We’re going to throw you in the DevOps deep end. DevOps Bootcamp at the CSIR Meraka Institute, Pretoria - Venue, Agenda and other details Just click on “Apply to Participate” Complete the questionnaire before coming. Time to build some more awesome At the Cyberinfrastructure Unit of the CSIR, we’re in the infrastructure game. We build high-performance networking, compute and data infrastructure for research communities. However, that infrastructure is quite meaningless unless it is efficiently used, and this is done by exploiting the infrastructure through the services that it offers. Some of these services are built directly by our engineers,...…

read more...

A new start for AAROC/DevOps

A few years back, we came to the conclusion that operating services manually was a pretty bad idea. The feeling that the proper configuration of grid middleware1 was a dark art was pervasive - so many configuration files, so many separate services, so many configuration options ! Impossible to do right, impossible to test and most of all, no way to keep knowledge about what was supposed to be done, let alone how it was supposed to be done. Deploying new sites or even individual services had to be done with the physical presence of an experienced operator, and rarely...…

read more...